Vista Platform 5.2.1 — full list of changes

Covers 5.2.1 through its release candidates. The release summary — what 5.2.1 fixes, what to do before upgrading, and how to verify the signatures — is in CHANGELOG.md. This page is the complete, per-change record behind it.

5.2.1 is a one-fix patch release for 5.2.0's declared certificates. In 5.2.0, asking the platform to verify a declared certificate where it is served never reached the executor as a verification: the job ran as a plain port probe, no observation was recorded, and the certificate stayed unverified. 5.2.1 forwards the verification plan, so Verify now, the nightly re-check and Merge into observed work as documented in Certificate monitoring.

Upgrading from 5.2.0

The schema and seed are unchanged from 5.2.0. The upgrade is a helm upgrade to the 5.2.1 chart; the schema-migration Job re-applies the same SQL and the wait-for-schema gates pass on the existing marker. Sensors and agents from 5.2.0 keep working; a sensor that verifies certificates must still be 5.2.0 or later.

Fixed

• Certificate verification never reached the sensor. "Verify now" on a declared certificate created a plain port-probe job: inventory-service's discovery-job proxy built the request to the scan engine by hand and dropped the verification plan, so the executor measured the port, no observation was recorded, and the certificate stayed unverified in both editions of 5.2.0. The plan is now forwarded, and a test drives the real proxy against a stand-in scan engine and reads the request it receives, so the wire itself is pinned rather than the helper behind it. Found by the release's own end-to-end check after 5.2.0 was installed: the declared certificate of a lab registry went to observed within a minute once the fix was in place.